Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 04:59:16.096 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51948 10 6452 1 2025-09-18 04:59:14.197 00:00:10.331 TCP 23.104.0.1:49164 -> 1.101.0.1:3000 11 1507 1 2025-09-18 04:59:48.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 04:59:48.248 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:00:16.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44662 10 6452 1 2025-09-18 05:00:14.561 00:00:10.370 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-09-18 04:56:29.969 00:05:01.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:01:14.967 00:00:10.447 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:01:16.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49620 10 6452 1 2025-09-18 04:57:29.973 00:05:01.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:02:15.452 00:00:10.325 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:02:16.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44890 10 6452 1 2025-09-18 05:03:15.816 00:00:10.329 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:03:16.915 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-09-18 05:04:16.182 00:00:10.366 TCP 23.104.0.1:38876 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:04:17.131 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44830 10 6452 1 2025-09-18 05:04:48.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:04:48.400 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:05:16.585 00:00:10.325 TCP 23.104.0.1:53664 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:05:17.304 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39156 10 6452 1 2025-09-18 05:06:16.950 00:00:10.376 TCP 23.104.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:02:29.971 00:05:01.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:06:17.477 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-09-18 05:03:29.974 00:05:01.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:07:17.395 00:00:10.372 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:07:17.701 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-09-18 05:08:17.919 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-09-18 05:08:17.812 00:00:10.394 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:09:18.246 00:00:10.323 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:09:18.163 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-09-18 05:09:48.430 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:09:48.574 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:10:18.606 00:00:10.368 TCP 23.104.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:10:18.399 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 10 6452 1 2025-09-18 05:11:19.027 00:00:10.378 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:11:18.618 00:00:10.642 TCP 1.101.0.1:3000 -> 22.102.0.1:44230 10 6452 1 2025-09-18 05:12:19.443 00:00:10.361 TCP 23.104.0.1:34192 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:12:19.294 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 10 6452 1 2025-09-18 05:08:29.973 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:09:29.977 00:05:01.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:13:19.842 00:00:10.395 TCP 23.104.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:13:19.464 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50786 10 6452 1 2025-09-18 05:14:20.275 00:00:10.366 TCP 23.104.0.1:38990 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:14:19.647 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6452 1 2025-09-18 05:14:48.497 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:14:48.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:15:20.675 00:00:10.328 TCP 23.104.0.1:46374 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:15:19.862 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-09-18 05:16:20.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-09-18 05:16:21.058 00:00:10.369 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:17:21.462 00:00:10.367 TCP 23.104.0.1:42530 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:17:20.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-09-18 05:18:20.464 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34780 10 6452 1 2025-09-18 05:14:29.977 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:18:21.869 00:00:11.080 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:15:29.980 00:05:01.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:19:20.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41494 10 6452 1 2025-09-18 05:19:22.988 00:00:10.365 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:19:48.243 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:19:48.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:20:20.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42282 10 6452 1 2025-09-18 05:20:23.388 00:00:10.362 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:21:21.109 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33544 10 6452 1 2025-09-18 05:21:23.787 00:00:10.368 TCP 23.104.0.1:41428 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:22:21.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54490 10 6452 1 2025-09-18 05:22:24.191 00:00:10.367 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:23:21.499 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35392 10 6452 1 2025-09-18 05:23:24.594 00:00:10.368 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:24:21.725 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54592 10 6452 1 2025-09-18 05:20:29.979 00:05:01.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:24:24.998 00:00:10.378 TCP 23.104.0.1:55028 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:24:48.670 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:24:48.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:21:29.982 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:25:25.402 00:00:10.326 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:25:21.942 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58686 10 6452 1 2025-09-18 05:26:25.770 00:00:10.374 TCP 23.104.0.1:50048 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:26:22.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37064 10 6452 1 2025-09-18 05:27:26.185 00:00:10.372 TCP 23.104.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:27:22.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-09-18 05:28:26.598 00:00:10.366 TCP 23.104.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:28:22.608 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6452 1 2025-09-18 05:29:22.824 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46154 10 6452 1 2025-09-18 05:29:27.000 00:00:10.363 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:29:48.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:29:48.842 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:26:29.981 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:30:22.996 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-09-18 05:30:27.405 00:00:10.364 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:27:29.984 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:31:23.216 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32782 10 6452 1 2025-09-18 05:31:27.804 00:00:10.370 TCP 23.104.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:32:23.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41994 10 6452 1 2025-09-18 05:32:28.210 00:00:25.406 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:33:23.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-09-18 05:33:43.677 00:00:10.367 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:34:23.856 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-09-18 05:34:49.132 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:34:48.728 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:34:44.104 00:00:10.330 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:35:24.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-09-18 05:35:44.485 00:00:10.363 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:32:29.982 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:36:24.253 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6452 1 2025-09-18 05:36:44.886 00:00:10.385 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:33:29.984 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:37:24.472 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-09-18 05:37:45.309 00:00:10.364 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:38:24.649 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-09-18 05:38:45.709 00:00:10.327 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:39:24.863 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 6452 1 2025-09-18 05:39:49.019 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:39:48.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:39:46.098 00:00:10.359 TCP 23.104.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:40:25.087 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44770 10 6452 1 2025-09-18 05:40:46.496 00:00:10.370 TCP 23.104.0.1:55358 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:41:25.270 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6452 1 2025-09-18 05:41:46.904 00:00:10.365 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:38:29.982 00:05:01.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:42:25.494 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-09-18 05:42:47.309 00:00:10.318 TCP 23.104.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:39:29.987 00:05:01.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:43:25.706 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-09-18 05:43:47.667 00:00:11.043 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:44:25.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6452 1 2025-09-18 05:44:49.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:44:49.115 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:44:48.747 00:00:10.363 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:45:26.133 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-09-18 05:45:49.148 00:00:10.361 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:46:26.351 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35062 10 6452 1 2025-09-18 05:46:49.548 00:00:10.363 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:47:26.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6452 1 2025-09-18 05:47:49.955 00:00:10.390 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:44:29.987 00:05:01.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:48:26.739 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44350 10 6452 1 2025-09-18 05:48:50.382 00:00:10.364 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:45:29.989 00:05:01.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:49:26.908 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:35664 10 6452 1 2025-09-18 05:49:48.939 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:49:49.100 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:49:50.782 00:00:10.362 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:50:27.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54884 10 6452 1 2025-09-18 05:50:51.184 00:00:10.359 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:51:27.310 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-09-18 05:51:51.581 00:00:10.367 TCP 23.104.0.1:40608 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:52:27.477 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40476 10 6452 1 2025-09-18 05:52:51.983 00:00:10.373 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:53:27.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-09-18 05:53:52.391 00:00:10.365 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:50:29.987 00:05:01.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 05:54:27.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59556 10 6452 1 2025-09-18 05:54:49.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 05:54:49.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 05:54:52.788 00:00:10.324 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:51:29.990 00:05:01.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 05:55:28.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-09-18 05:55:53.154 00:00:10.376 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:56:28.331 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33234 10 6452 1 2025-09-18 05:56:53.565 00:00:10.368 TCP 23.104.0.1:52060 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:57:28.510 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37252 10 6452 1 2025-09-18 05:57:53.974 00:00:10.953 TCP 23.104.0.1:41556 -> 1.101.0.1:3000 11 1507 1 2025-09-18 05:58:28.728 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52174 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1065, avg pps: 0, avg bpp: 318 Time window: 2025-09-18 04:56:29 - 2025-09-18 05:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0016s Wall: 0.0029s flows/second: 55914.9 Runtime: 0.0029s